NIST AI RMF — a profile, not a certificate

The NIST AI Risk Management Framework 1.0 (January 2023) is voluntary guidance from the US National Institute of Standards and Technology: four functions — Govern, Map, Measure, Manage — broken into categories and subcategories, with a companion Playbook of suggested actions.

Why you would switch it on

Because a US customer, investor or partner asked. It is the vocabulary US procurement speaks, and most of what it asks for you will already have produced for the EU AI Act and ISO/IEC 42001 — a governance structure, an inventory, a risk method, measurement and monitoring.

What you get, and what you do not

You get a NIST AI RMF profile: a document that states, function by function, what your organisation does and where the evidence is. You do not get a certificate — no certification exists for the NIST AI RMF, no body accredits against it, and Veritome will not imply one. The programme ends in the profile, not in a readiness gate.

In Veritome

Switch it on under Organisation → Frameworks: a programme under Frameworks in four phases named for the functions — Govern · Map · Measure · Manage — with some steps asking about each system as well as the organisation (a system's page lists what the standard asks about it). Every step produces a section of one document, the AI RMF Profile, which is composed from the approved records on every request, hashed, minted as organisation evidence and shown on the programme page's Profile tab, with the PDF on Reports and Documents. Where a step asks for what the EU AI Act journey already evidenced, it arrives Done, credited from your EU AI Act work.

Price and timing. NIST AI RMF is included from the Govern plan up — there is no per-framework fee. It opens with the full launch, planned for late November 2026: until then, during the public beta, it is listed under Frameworks and on Programmes as a faded, inactive entry marked Available at launch, its programme page does not open, and the pricing page states the date it lands.